PA · HHS OCR reports
HIPAA breaches in Pennsylvania
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Pennsylvania.
Reports
345
Individuals affected
21,205,627
Under investigation
34
Top type: Hacking/IT Incident
State breach notification law
73 P.S. §§ 2301-2330 (Breach of Personal Information Notification Act) (amended 2024)
Timing: notify affected individuals within 7 business days following determination of a breach. 34
Read the Pennsylvania data breach notification law summaryAll reports, newest first
Page 7 of 7. 345 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Temple University Physicians | Healthcare Provider | 3,780 | Sep 5, 2014 | Theft | Archive (closed) |
| University of Pennsylvania Health System | Healthcare Provider | 661 | Jul 16, 2014 | Theft | Archive (closed) |
| Highmark Inc. | Business Associate | 2,589 | Jul 8, 2014 | Theft | Archive (closed) |
| David DiGiallorenzo, D.M.D. | Healthcare Provider | 11,000 | Jun 19, 2014 | Hacking/IT Incident, Unauthorized Access/Disclosure | Archive (closed) |
| Penn State Milton S. Hershey Medical Center | Healthcare Provider | 1,801 | Jun 6, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Reading Health System | Healthcare Provider | 1,845 | Apr 29, 2014 | Loss | Archive (closed) |
| Susquehanna Health | Healthcare Provider | 657 | Mar 27, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Partners In Nephrology & Endocrinology, P.C. | Healthcare Provider | 5,000 | Mar 14, 2014 | Other | Archive (closed) |
| Supportive Concepts for Families, Inc. | Healthcare Provider | 593 | Feb 13, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Geisinger Bloomsburg Hospital | Healthcare Provider | 3,101 | Jan 23, 2014 | Loss | Archive (closed) |
| Temple Physicians Inc. | Healthcare Provider | 694 | Jan 13, 2014 | Loss, Theft | Archive (closed) |
| UPMC | Healthcare Provider | 1,279 | Nov 27, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Genesis Rehabilitation Services | Healthcare Provider | 1,167 | Nov 1, 2013 | Loss | Archive (closed) |
| Reimbursement Technologies, Inc. | Healthcare Clearing House | 2,300 | Oct 31, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Schuylkill Health System LVHN | Healthcare Provider | 2,810 | Oct 4, 2013 | Theft | Archive (closed) |
| Reconstructive Orthopaedic Associates II, P.C. d/b/a Rothman Institute | Healthcare Provider | 2,350 | Oct 3, 2013 | Theft | Archive (closed) |
| Lutheran Social Services of South Central Pennsylvania | Healthcare Provider | 7,803 | May 20, 2013 | Hacking/IT Incident | Archive (closed) |
| AssuranceMD f/k/a Harbor Group | Business Associate | 22,000 | May 7, 2013 | Theft | Archive (closed) |
| TMG Health | Business Associate | 3,794 | Apr 5, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Lancaster General Medical Group | Healthcare Provider | 527 | Mar 4, 2013 | Theft | Archive (closed) |
| WAYNE MEMORIAL HOSPITAL | Healthcare Provider | 1,184 | Jan 18, 2013 | Loss | Archive (closed) |
| Liberty Resources, Inc. | Healthcare Provider | 3,183 | Aug 17, 2012 | Theft | Archive (closed) |
| Siemens Medical Solutions, USA | Business Associate | 66,601 | Aug 10, 2012 | Theft | Archive (closed) |
| Thomas Jefferson University Hospitals | Healthcare Provider | 590 | Apr 30, 2012 | Theft | Archive (closed) |
| CardioNet, Inc. | Healthcare Provider | 728 | Feb 27, 2012 | Theft | Archive (closed) |
| CardioNet, Inc | Healthcare Provider | 1,300 | Jan 10, 2012 | Theft | Archive (closed) |
| Rite Aid Corporation | Healthcare Provider | 2,900 | Dec 7, 2011 | Other | Archive (closed) |
| Lebanon Internal Medicine Associates | Healthcare Provider | 55,000 | Nov 2, 2011 | Improper Disposal | Archive (closed) |
| Lankenau Medical Center | Healthcare Provider | 500 | Oct 17, 2011 | Theft | Archive (closed) |
| Thomas Jefferson University Hospitals, Inc. | Healthcare Provider | 3,150 | Oct 14, 2011 | Theft | Archive (closed) |
| FIRST PRIORITY LIFE INSURANCE COMPANY | Business Associate | 579 | Sep 28, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| AllOne Health Management Solutions, Inc. | Business Associate | 507 | Sep 23, 2011 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Indiana Regional Medical Center | Healthcare Provider | 1,388 | May 9, 2011 | Theft | Archive (closed) |
| Keystone/AmeriHealth Mercy Health Plans | Health Plan | 808 | Dec 30, 2010 | Loss | Archive (closed) |
| Geisinger Wyoming Valley Medical Center | Healthcare Provider | 2,928 | Dec 28, 2010 | Theft | Archive (closed) |
| Gair Medical Transcription Services, Inc. | Business Associate | 1,085 | Dec 15, 2010 | Unauthorized Access/Disclosure | Archive (closed) |
| Albert Einstein Healthcare Network | Healthcare Provider | 613 | Nov 30, 2010 | Theft | Archive (closed) |
| Aon Consulting | Business Associate | 22,642 | Sep 7, 2010 | Other | Archive (closed) |
| Thomas Jefferson University Hospitals, Inc. | Healthcare Provider | 21,000 | Aug 9, 2010 | Theft | Archive (closed) |
| Penn Treaty Network America Insurance Company | Health Plan | 560 | Aug 3, 2010 | Other | Archive (closed) |
| Iron Mountain Data Products, Inc. (now known as | Business Associate | 800,000 | Jul 19, 2010 | Loss | Archive (closed) |
| Aramark Healthcare Support Services, LLC | Business Associate | 937 | Jun 24, 2010 | Other | Archive (closed) |
| Siemens Medical Solutions, USA, Inc | Business Associate | 130,495 | Jun 4, 2010 | Theft | Archive (closed) |
| University of Pittsburgh Student Health Center | Healthcare Provider | 8,000 | Apr 2, 2010 | Loss, Theft | Archive (closed) |
| The Children's Hospital of Philadelphia | Healthcare Provider | 943 | Nov 24, 2009 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.